← Database
CVE-2021-4212
MEDIUM
CVSS: 6.7
Published: 2022-04-22
Modified: 2026-06-17
Description
A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected Platforms
Lenovo Legion Y540-15Irh FirmwareLenovo C340-15ImlLenovo L340-17IwlLenovo Yoga Creator 7-15Imh05Lenovo Yoga Slim 7-14Itl05 FirmwareLenovo Ideapad 5 Pro-14Acn6 FirmwareLenovo L340-17IrhLenovo Yoga Slim 7-14Are05Lenovo Yoga Slim 7 Carbon 13Itl5 FirmwareLenovo Ideapad 3-15Are05 Firmware
Weakness Type
CWE-20, CWE-20